The chief processor of personal data for the online store www.pakendikeskus.ee is Pakendikeskus AS (hereinafter ‘Pakendikeskus’), registry code 10102167, located at Katusepapi 35, Tallinn, 11412, phone 372 605 3000 and email eshop@pakendikeskus.ee (hereinafter referred to as Pakendikeskus)

Types of processed personal data

-       name;

-       contact information such as phone number and email address;

-       billing and delivery address;

-       bank account number;

-       cost of goods and services and payment-related data (purchase history);

-       customer support details;

-       other information related to customer surveys and/or offers.

You can read more about using and storing cookies here.

Purposes of the processing of personal data

The personal data shall be processed for the performance of the contract concluded with the Buyer. The personal data shall be processed for compliance with legal obligations (for example, accounting and settlement of consumer disputes). The personal data shall be used for managing the Buyer’s orders and delivering the goods. Purchase history data (date of the purchase, goods, quantity, Buyer’s details) shall be used for preparing an overview of the purchased goods and services and for analysing customer preferences. Bank account numbers shall be used for making refunds to the Buyer. Contact details such as the customer’s email address, phone number and name of the Buyer are processed for resolving any issues related to the provision of the goods and services (customer support). The IP address and other network identifiers of the user of the online store shall be processed for providing the online store service as an information society service as well as for producing web usage statistics.

Transmission of personal data to authorised processors

Pakendikeskus shall keep the Buyer's personal information that has become known to it during the registration and use of the user account and disclose it to third parties only with the Buyer's consent, unless the disclosure obligation or right arises from law. The user of the online store agrees that Pakendikeskus is entitled to process its data to provide the Buyer with suitable services, including forwarding the Buyer's data to persons involved in the provision of the service by Pakendikeskus to the Buyer.

List of authorised processors:

Lumav Commerce - Personal data are transmitted to information technology service providers, if it is necessary for the functionality or data hosting of the online store.

Eeva - Personal data are transmitted for accounting purposes.

DPD - Personal data are transmitted for the delivery of goods to the Buyer.

ItellaSmartPOST - Personal data are transmitted for the delivery of goods to the Buyer.

Omniva - Personal data are transmitted for the delivery of goods to the Buyer.

ViaExpress - Personal data are transmitted for the delivery of goods to the Buyer.

AV Transport OÜ - Personal data are transmitted for the delivery of goods to the Buyer.

Swedbank - Personal data are transmitted to pay for the goods.

SEB - Personal data are transmitted to pay for the goods.

Luminor (Nordea) - Personal data are transmitted to pay for the goods.

LHV - Personal data are transmitted to pay for the goods.

NETS (credit card payments) - Personal data are transmitted to pay for the goods.

Google Analytics - Collecting information to improve online store user experience.

Mouseflow - Collecting information to improve online store user experience.

Zendesk - Collecting information to improve online store user experience.

Stacc - Collecting information to improve online store user experience.

Plumbr - Collecting information to improve online store user experience.

Security and access to data

Submitted personal data are stored on servers of Pakendikeskus AS, which are located within the territory of the member states of the European Union or countries that have joined the European Economic Area. The data may be transmitted to countries wherein the level of data protection has been deemed sufficient by the European Commission as well as to U.S. companies which have joined the Privacy Shield framework. Pakendikeskus shall implement appropriate physical, organisational and information technology security measures to protect the personal data against accidental or unlawful destruction, loss and alteration as well as unauthorised access and disclosure. The transmission of personal data to Pakendikeskus’s authorised processors shall be carried out on the basis of agreements concluded with Pakendikeskus and the authorised processors. Authorised processors are required to ensure that appropriate security measures are taken when processing personal data.

Accessing and correction of personal data

The Buyer can access the personal data stored in the online store and make corrections in the online store's account management. If the Buyer has made a purchase at the online store as a guest (without a user account), the Buyer can request the personal data from the data request form.

Withdrawal of consent

If the processing of personal data is based on the consent of the Buyer, the Buyer has the right to withdraw the consent in the account management of the online store.

Retention

Upon closure of a customer account in the online store, any personal data shall be deleted, unless the retention of the data is required for accounting purposes or for the resolution of consumer disputes.

If the Buyer has made a purchase as a guest (without a user account) in the online store, the personalised purchase history is kept for three years.

In the event of disputes relating to payments or consumer disputes, related personal data shall be retained until the settlement of the claim or the end of the validity period (three years).

Personal data which are necessary for accounting shall be retained for seven years.

Deletion

The Buyer can delete personal data stored in the online store together with the user account in the online store account management.

The Buyer can request the deletion of other personal data via the data request form.

Pakendikeskus shall respond to the request for erasure within one month at the latest and, if necessary, specify the period for erasure.

Transfer

The Buyer can download an electronic extract of personal data stored in the online store through the online store account management.

The Buyer can request the transfer of other personal data via the data request form. Pakendikeskus shall respond to the request for data transfer within a period of not more than one month and shall identify and inform it of the personal data applicable to the transfer.

Direct marketing messages

The Buyer’s email address and phone number may be used for sending direct marketing messages, if the Buyer has given their consent. If the Buyer does not wish to receive direct marketing messages, the Buyer shall select the appropriate reference in the newsletter or send a message to the Pakendikeskus’s email address eshop@pakendikeskus.ee. 

In the case of the processing of personal data for direct marketing purposes (profiling), the Buyer has the right to object to the prior as well as the further processing of their personal data, including for profile analysis related to direct marketing, at any time by notifying Pakendikeskus at email address eshop@pakendikeskus.ee. 

Settlement of disputes

Any disputes arising between Pakendikeskus and the Buyer in relation to the processing of personal data shall be settled through negotiation. Complaints may be submitted to Pakendikeskus by email at eshop@pakendikeskus.ee. 

The supervisory authority in Estonia is the Estonian Data Protection Inspectorate (info@aki.ee).